HIGH🇵🇱 Wersja polska

CVE-2026-24058

CVSS 8.1v4.0pub. 2026-01-22upd. 2026-02-18

Soft Serve is a self-hostable Git server for the command line. Versions 0.11.2 and below have a critical authentication bypass vulnerability that allows an attacker to impersonate any user (including admin) by "offering" the victim's public key during the SSH handshake before authenticating with their own valid key. This occurs because the user identity is stored in the session context during the "offer" phase and is not cleared if that specific authentication attempt fails. This issue has been fixed in version 0.11.3.

CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

  • Charm Soft Serve

    APP
    Charm
    < 0.11.3
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2026-30832CRITICAL9.1PL ✓ten sam produkt

SSRF w Soft Serve — dostęp do wewnętrznych usług przez LFS endpoint

CVE-2025-64522CRITICAL9.1PL ✓ten sam produkt

SSRF w Soft Serve — webhooks bez walidacji URL umożliwiają dostęp do sieci wewnętrznej

CVE-2026-33353HIGH7.1ten sam produkt

Soft Serve is a self-hostable Git server for the command line. From version 0.6.0 to before version 0.11.6, an...

CVE-2023-43809HIGH7.5ten sam produkt

Soft Serve is a self-hostable Git server for the command line. Prior to version 0.6.2, a security vulnerabilit...

CVE-2026-22253MEDIUM5.4ten sam produkt

Soft Serve is a self-hostable Git server for the command line. Prior to version 0.11.2, an authorization bypas...